$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3ae7e049-5354-42f2-9844-434560c3753b.roa File: 3ae7e049-5354-42f2-9844-434560c3753b.roa (raw, json) Hash identifier: X1fplH1D/hdTezASSkjs2jVE0kYhkRlb08X9r+i6DHY= Subject key identifier: BB:CD:D1:F9:32:0A:B1:25:D3:F8:BD:57:75:D2:78:6F:5C:32:C6:98 Certificate issuer: /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Certificate serial: 727AC8CAB5A48D954B80B44BB5A09559B8905FB1 Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3ae7e049-5354-42f2-9844-434560c3753b.roa Signing time: Mon 22 Apr 2024 00:00:00 +0000 ROA not before: Mon 22 Apr 2024 00:00:00 +0000 ROA not after: Mon 27 May 2024 23:59:59 +0000 asID: 35916 IP address blocks: 208.70.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7a:c8:ca:b5:a4:8d:95:4b:80:b4:4b:b5:a0:95:59:b8:90:5f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Validity Not Before: Apr 22 00:00:00 2024 GMT Not After : May 27 23:59:59 2024 GMT Subject: serialNumber=2ad660ba25c830628ca2397cea40a30fda353e5ed4e7d88fab7a038864572937, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:ed:30:3a:27:57:a2:96:c8:89:2b:1b:b5: a1:7d:67:59:9e:b7:be:a3:15:91:f9:d6:dc:7f:dd: c9:89:b0:24:6c:8f:71:38:b1:95:a5:f0:ef:06:0f: 80:44:07:10:a7:3d:19:d8:c7:5a:e2:20:05:3e:f5: 52:62:3d:5e:87:93:f0:78:1e:7c:a7:64:02:10:e0: 04:25:b2:1a:7b:d3:40:86:c9:b5:37:a6:9c:a9:41: a8:04:29:ec:cc:24:01:0d:03:b4:f6:e7:9f:d5:8d: 92:6b:b0:a1:b3:1d:d7:27:9c:df:9c:47:fd:3f:62: 9e:e8:42:1e:8b:33:75:0c:e2:04:ae:de:5a:d0:85: f3:b6:40:c5:13:91:3b:12:b5:b9:7e:28:60:ea:03: a7:d9:cf:3b:a3:16:f1:29:6f:1e:3d:6f:fa:b9:19: 98:34:df:95:40:c9:ea:9d:25:bc:05:48:f9:76:b0: 80:b3:74:ce:41:ed:8c:be:ff:28:61:8c:f7:02:58: 2c:09:17:ac:9b:cc:27:1f:13:74:60:5f:bd:43:b8: cb:46:6c:19:4e:47:8f:3f:83:4e:70:45:0a:ad:1a: 66:b1:d1:34:73:9e:e5:3b:a2:7e:40:f4:f2:48:3e: fb:ba:84:3a:b9:1a:7b:3f:10:aa:1d:f2:26:97:b5: 7d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CD:D1:F9:32:0A:B1:25:D3:F8:BD:57:75:D2:78:6F:5C:32:C6:98 X509v3 Authority Key Identifier: keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/3ae7e049-5354-42f2-9844-434560c3753b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.70.72.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:bd:8e:aa:4f:17:fa:49:88:a7:a8:bf:b5:b5:6c:d0:f6:64: 85:27:e2:54:eb:74:e3:e6:cf:ad:5e:f6:be:7d:c8:57:3e:27: ea:75:df:55:58:ba:b7:12:af:8a:9c:68:51:fc:a7:70:6b:f7: 5f:25:77:87:78:78:64:33:04:ba:67:78:e3:30:c8:37:25:7b: e1:59:32:00:be:67:6c:54:45:7b:36:bf:af:5d:ef:ca:7d:35: 31:e8:b5:be:4d:76:5b:f0:3b:fe:e7:6e:90:1b:db:c7:38:4b: 38:c5:25:53:a1:03:5c:c8:ec:78:55:25:0f:29:a5:e2:4d:bf: 55:44:47:65:bb:19:8e:99:4c:0b:44:f6:21:a7:26:f7:ef:47: ce:eb:33:bb:a9:f4:a8:36:38:f1:14:56:b8:a2:d4:ba:f2:5e: 47:2c:4a:75:bd:37:32:46:a5:58:24:2b:13:e4:89:9f:1e:1a: ea:c9:6c:cc:d9:50:24:f8:f6:7a:0f:b8:f0:c3:aa:be:6e:95: 18:7d:d3:79:3e:c6:97:42:02:14:58:8b:28:5d:49:d9:3f:c0: b0:a9:9e:7a:37:ab:68:4b:39:29:ac:9c:03:8d:5c:56:96:a4: 9b:3f:75:40:97:40:88:5e:c8:d8:4c:35:7e:e8:48:0d:ca:e9: 44:e2:f6:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcnrIyrWkjZVLgLRLtaCVWbiQX7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4 YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWQ2NjBiYTI1YzgzMDYyOGNhMjM5N2NlYTQwYTMwZmRh MzUzZTVlZDRlN2Q4OGZhYjdhMDM4ODY0NTcyOTM3MS0wKwYDVQQDEyQzNTA5NWUz ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc6u0wOidXopbIiSsbtaF9Z1met76jFZH51tx/3cmJsCRs j3E4sZWl8O8GD4BEBxCnPRnYx1riIAU+9VJiPV6Hk/B4HnynZAIQ4AQlshp700CG ybU3ppypQagEKezMJAENA7T255/VjZJrsKGzHdcnnN+cR/0/Yp7oQh6LM3UM4gSu 3lrQhfO2QMUTkTsStbl+KGDqA6fZzzujFvEpbx49b/q5GZg035VAyeqdJbwFSPl2 sICzdM5B7Yy+/yhhjPcCWCwJF6ybzCcfE3RgX71DuMtGbBlOR48/g05wRQqtGmax 0TRznuU7on5A9PJIPvu6hDq5Gns/EKod8iaXtX3PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu83R+TIKsSXT+L1XddJ4b1wyxpgwHwYDVR0jBBgwFoAUFfTvBPWvI5bJ XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00 OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3 NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj OGUyNDMzZDMzLzNhZTdlMDQ5LTUzNTQtNDJmMi05ODQ0LTQzNDU2MGMzNzUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAPQRkgwDQYJKoZIhvcNAQELBQADggEBAG69jqpPF/pJiKeov7W1bND2ZIUn 4lTrdOPmz61e9r59yFc+J+p131VYurcSr4qcaFH8p3Br918ld4d4eGQzBLpneOMw yDcle+FZMgC+Z2xURXs2v69d78p9NTHotb5NdlvwO/7nbpAb28c4SzjFJVOhA1zI 7HhVJQ8ppeJNv1VER2W7GY6ZTAtE9iGnJvfvR87rM7up9Kg2OPEUVrii1LryXkcs SnW9NzJGpVgkKxPkiZ8eGurJbMzZUCT49noPuPDDqr5ulRh903k+xpdCAhRYiyhd Sdk/wLCpnno3q2hLOSmsnAONXFaWpJs/dUCXQIheyNhMNX7oSA3K6UTi9sc= -----END CERTIFICATE-----Generated at Fri May 3 00:07:10 2024 by rpki-client on console-ams.rpki-client.org